MANAGING CYBERSECURITY RISK 2015

MANAGING CYBERSECURITY RISK 2015 Cybersecurity has become an ubiquitous business risk, extending beyond IT and security professionals to the C-suite and the boardroom. In the last year, virtually no industry sector anywhere has been immune from the threat. Experts say it s a trend that will likely continue, but studies indicate that cybersecurity spending is actually decreasing. It s a dangerous conundrum. How does your company escape it? Listen to our legal and technical experts talk about key emerging cybersecurity threats and how to manage them. Our experts will offer you practical guidance on how to protect against cybersecurity concerns in the Cloud; deal with inevitable data breaches and how to contract smartly to protect yourselves against security losses. Our speakers will offer insight and solutions for corporate directors and officers that need to take proactive steps to deal with these urgent issues before they happen. We will also cover off the emerging opportunities offered by cyberliability insurance and how you can best leverage your own IT resources to best protect your enterprise and make the most of your IT spend. This course is a must for CEOs, CIOs, Risk Managers, Directors, Officers, In-house and External Counsel and anyone else that wants to learn how to mitigate the myriad complexities of cybersecurity risks and management that organizations face today. CUTTING EDGE TIMELY INTERACTIVE SPEAKERS TORONTO DECEMBER 8, 2015 WEBINAR DECEMBER 8, 2015 COURSE LEADERS Brian Bourne, President, New Signature Canada Lisa R. Lifshitz, Partner, Torkin Manes LLP GUEST SPEAKERS James Arlen, Director Risk and Advisory Services, Leviathan Security Group Ted F. Claypoole, Partner, Womble Carlyle LLP Gregory L. Eskins, Senior Vice President, National Cyber Practice Leader, Marsh Canada Limited Ian Kyer, Legal Counsel, RPM Technologies Aaron Sawchuk, General Counsel, Sales, Marketing & Business Services, BlackBerry David Senf, IDC, Vice President, Infrastructure Solutions COURSE HIGHLIGHTS Introduction New Threats in the Cybersecurity Landscape Security and the Cloud Legal and Technical Considerations Practical Contracting for Cybersecurity Managing a Data Breach Is Cyberliability Insurance the Answer? Making the Most of Your IT Security Spend REGISTER BEFORE NOVEMBER 6 AND SAVE $300! Register online at www.lexpert.ca/cpdcentre For more information, please contact Lexpert Events at 1-877-298-5868

MANAGING CYBERSECURITY RISK 2015 PROGRAM OUTLINE 8:00-9:00 A.M. REGISTRATION AND BREAKFAST 9:00-10:15 A.M. INTRODUCTION NEW THREATS IN THE CYBERSECURITY LANDSCAPE Brian Bourne, James Arlen, Ted F. Claypoole Ransomware/Cyber extortion Phishing Hacking in the Internet of Things Era 10:15-10:30 A.M. REFRESHMENT BREAK 10:30-12:00 P.M. SECURITY AND THE CLOUD LEGAL AND TECHNICAL CONSIDERATIONS Lisa R. Lifshitz, James Arlen, Aaron Sawchuk and Ted F. Claypoole Understanding the technology of Cloud Computing Understanding Cloud Exposures Understanding and Applying Cloud Security Standards Choosing the Right Cloud Vendor Comparing Cloud structures to what you have now 12:00-1:00 P.M. NETWORKING LUNCH 1:00-1:45 P.M. PRACTICAL CONTRACTING FOR CYBERSECURITY Ian Kyer How to balance the needs of the financial institution for cyber security with the legitimate interests of service providers OPC Privacy and Security Requirements OSFI Guidelines on Data Security Audit Clauses 1:45-3:00 P.M. MANAGING A DATA BREACH Lisa R. Lifshitz and Ted F. Claypoole Technical steps to identifying and containing the Data Breach New Legal Requirements regarding mandatory Data Breach notification Directors and management responsibility/liability Creating an Effective Response and Communication Plan Lessons Learned from the famous Data Breaches 3:00-3:15 P.M. REFRESHMENT BREAK 3:15-4:00 P.M. IS CYBERLIABILITY INSURANCE THE ANSWER? Gregory L. Eskins Gaps in traditional coverage Understanding Risks covered by Cyberliability insurance Understanding the Cyberliability market Choosing the right Cyberliability policy 4:00-5:00 P.M. MAKING THE MOST OF YOUR IT SECURITY SPEND Brian Bourne and David Senf Structuring a Comprehensive Security Program Identifying Key IT Security Gaps Hiring the right IT security personnel 5:00 P.M. CONCLUSION AND Q&A REGISTER BEFORE NOVEMBER 6 AND SAVE $300!

LISA R. LIFSHITZ COURSE LEADER Lisa is a partner in Torkin Manes Business Law Group, specializing in the areas of information technology and business law and is the leader of the firm s Technology, Privacy & Data Management Group. Lisa has particular expertise in preparing and negotiating cloud computing agreements (SaaS, PaaS, IasS), cloud retail agreements, cloud storage agreements, Internet-related, m-commerce and e-commerce agreements, app development agreements, hosting agreements, mobile payment agreement, outsourcing, system acquisition and master services agreements. Lisa is the President of the Canadian IT Law Association, is the current Chair of the Technology Committee of the American Bar Association s Business Law Section and is a member of the ABA Standing Committee on Technology and Information Systems. Lisa was recently appointed to ABA s Cybersecurity Legal Task Force and was made a member of Council, Section of Science & Technology Law. She is also on the Editorial Boards of the ABA s Business Law Today and The Sci-Tech Lawyer. Lisa has been recognized in Canada and abroad for her expertise in technology law matters. She is ranked by The Best Lawyers in Canada 2015 for Technology Law, as a Leading lawyer in Technology Media & Telecommunications Law by Who s Who Legal: Canada, 2015 and as a Leading lawyer in Internet & e-commerce Law by the International Who s Who of Business Lawyers. She has also been ranked by the Canadian Legal Lexpert Directory in Computer & I.T. Law and Technology Transactions since 2005. Lisa is a prolific writer and speaker and has been published by Internet and Ecommerce Law in Canada, Data Guidance, Corporate Risk Canada, Business Law Today, The Cyberspace Lawyer and other publications. She currently writes the monthly IT Girl technology law column for Canadian Lawyer Online. Lisa was recently recognized by Chambers Global 2015 for her expertise in Information Technology. BRIAN BOURNE COURSE LEADER Brian spends his days providing leadership to CMS Consulting Inc., an IT consulting firm that designs, builds and manages solutions both on premise and in the cloud for mid-market and large enterprise customers. He is also an active member of the IT security community, co-founding Canada s largest security conference (SecTor) and the security user group TASK, which has become one of the largest IT security groups anywhere with over 3500 active members. When he isn t being a geek around computers, he s either burning gasoline in some sort of motorized vehicle or pretending to be a triathlete. GREGORY L. ESKINS As national practice leader, Greg is charged with advising client s on emerging cyber risk issues, the development of client specific product solutions, managing and growing market relationships, and assisting Marsh offices/colleagues across all industry segments.he works closely with Marsh s Risk Consulting ERM team, helping client s assess, analyze, quantify/ measure, and transfer various components of cyber risks. In addition to that role, Greg is also responsible for managing the accounts of international clients including Chartered Banks, Life Insurance Companies, and Technology organizations. TED F. CLAYPOOLE Ted Claypoole leads the IP Transaction Team and the Cyber and Data Management Team for Womble Carlyle in Charlotte, NC. Ted also chairs the Cyberspace Law Committee for the American Bar Association s Business Law Section. Ted is co-author, with Theresa Payton, of the books Privacy in the Age of Big Data and Protecting Your Internet Identity: Are You Naked Online? Ted has led numerous data breach remediation teams, including for incidents at Heartland Payment Systems and the South Carolina Department of Revenue, and he worked as in-house technology/data counsel for Bank of America and CompuServe.

JAMES ARLEN James Arlen is Leviathan s Director of Risk and Advisory Services. He is responsible for the development and delivery of Leviathan s professional services, assisting executive clients to develop and implement their information security policies and strategic plans. Over the past twenty years, James has delivered information security solutions to Fortune 500, TSE 100, and major public-sector organizations. In both a consultant and staff member role, James has led business and technical teams of professionals in both tactical short-term projects and multi-year organizational change initiatives. James has held key contributor roles, including both being the CISO of a publicly traded financial institution and being the Information Security Coordinator at a large-scale power utility. Among other major technical accomplishments, James has architected and built multi-million dollar security infrastructure, handled incident response and event containment, written multiple policy and standards suites, and completed penetration testing activities as both a leader and as a team member. C. IAN KYER After 33 years at Faskens, Ian has become inhouse counsel at RPM Technologies, a provider of retail product management software to Canada`s financial services companies. Ian was the founder and first president of the Canadian IT Law Association and is a past president of the Computer Law Association, Inc., (now itechlaw). Ian is the author or editor of many books including Outsourcing Transactions: A Practical Guide (Canada Law Book, 2006) with John Beardwood and Kyer and Fecenko on Computer- Related Agreements: A Practical Guide, Second Edition (Butterworths, Toronto, 1997) with Mark Fecenko. He has also written a novel about the relationship between Mozart and Antonio Salieri. Entitled Damaging Winds it is available as an ebook through the National Arts Centre website. AARON SAWCHUK Aaron M Sawchuk is General Counsel, Sales, Marketing and Business Services at BlackBerry. He is a graduate of the University of Toronto and Harvard (where he was a Fulbright Scholar) and has been an Adjunct Professor at University of Toronto Law School for a number of years. Prior to working at BlackBerry, Aaron was the Director of Policy, Enforcement and Regulatory Affairs at CRIA. DAVID SENF David Senf is IDC s Vice President, Infrastructure and Cloud Solutions located in Toronto, Canada. He and his team measure technology trends and the competitors across security, cloud, software-defined datacenter and other infrastructure solutions. He consults with and presents to CIOs, IT professionals, tech vendors and their channel partners. He has hundreds of press appearances including The Globe and Mail, CBC, The Star, Wall Street Journal, and Wired.

Yes! Please register the following delegate(s) for MANAGING CYBERSECURITY RISK 2015 Mr. Ms. Title: E-mail: Telephone #: Company: Address: City: Province: Postal Code: Payment enclosed Payment to follow Invoice me Charge to my VISA AMEX MC Card#: CVV: Expiry Date: Cardholder s Name: Signature: Webinar participants will receive an online link to access the program materials as part of their registration fee In class participants material selection: Print Digital Both (an additional charge of $99 will apply) (photocopy for additional delegates) REGISTER ONLINE: www.lexpert.ca/cpdcentre In class registration fee includes the course, materials, breakfast, lunch and coffee breaks. Substitutions are granted with notification to Lexpert Events. Select price: Early Bird Price $1195 + applicable taxes Regular Course Price $1495 + applicable taxes Select venue (inclass only): Public Sector Price $1295 + applicable taxes Webinar Price* (Dec. 8) $995 + applicable taxes TORONTO - December 8 - St. Andrews Club and Conference Centre 150 King St West, 27th Floor, Toronto, ON M5H 1J9 www.standrewsclub.ca If this brochure is undeliverable to the addressee, then please forward to a Senior Executive or Corporate Counsel. (GST Reg # 897176350) SPECIFICALLY DESIGNED FOR: In-House Counsel CIOs IT Executives and Project Managers ACCREDITATION Senior IT Consultants Procurement Managers Compliance Officers LAW SOCIETY OF BRITISH COLUMBIA This program has been accredited by the Law Society of British Columbia for 6.5 hours towards the professional development requirement for certification. LAW SOCIETY OF ALBERTA For Alberta lawyers, consider including this course as a CPD learning activity in your mandatory annual Continuing Professional Development Plan as required by the Law Society of Alberta. LAW SOCIETY OF UPPER CANADA (CPD) This program can be applied towards the 9 Substantive Hours of Continuing Professional Development (CPD) required by the Law Society of Upper Canada. Please note that this program is not accredited for Professionalism hours or for the New Member Requirement. Total hours 6.5 BARREAU DU QUÉBEC The Barreau du Québec automatically recognizes the same number of hours for this training activity, as long as it has been accredited by another Law Society that has adopted MCLE. LAW SOCIETY OF NEW BRUNSWICK This program has been accredited by the Law Society of New Brunswick for 6.5 hours towards the mandatory continuing professional development requirement. NOVA SCOTIA BARRISTERS SOCIETY For Nova Scotia lawyers, consider including this course toward your Mandatory CPD Requirement. *WEBINAR PRICE CLARIFICATION Please note, these prices are on a per-person basis. For payment of the price for one person, only one individual is allowed to be logged in, and viewing at a time. To inquire about Group Rates, please see the contact information below. CANCELLATION AND REFUND POLICY: Full refunds, less a $250.00 (plus applicable taxes) administration fee, will be given for cancellations received in writing 10 business days before the course start date. Unfortunately, refunds cannot be provided after this date. Substitution of delegates may be made at any time. Please note that Lexpert reserves the right to cancel any course deemed necessary and will, in such an event, make a full refund of registration fees paid. For reasons beyond the control of the course organizer, it may be necessary to change the subject agenda of the program and no liability is assumed for any such changes in content. CONTACT US: Web: www.lexpert.ca/cpdcentre Call: Toll free 1-877-298-5868 or (416) 609-5868 Fax: (416) 609-5841 E-mail: register@lexpert.ca Mail: Lexpert, Marketing Events One Corporate Plaza, 2075 Kennedy Road, 11th Floor, Toronto, ON, M1T 3V4 Please make cheques payable to Lexpert